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DETAILED ACTION 



1. 



Claims 1-20 -are pending. 



Priority 



2. Receipt Is acknowledged of papers submitted under 35 U.S.C. 1 19(a)-(d), which 
papers have been placed of record in the file. 

Information Disciosure Statement 

3. The information disclosure statement (IDS) submitted on 2/6/06 is being 
considered by the examiner. 



Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 



5. Claim 20 is rejected under 35 U.S.C. 101 because the claimed invention is 
directed to non-statutory subject matter. Claim 20 is directed to a computer program 
and which not tangibly embodied on an appropriate computer readable medium and 
therefore does not constitute statutory subject matter. 



6. The following is a quotation of the second paragraph of 35 U.S.C. 112: 



Ciaim Rejections - 35 USC § 101 



4. 



35 U.S.C. 101 reads as follows: 



Claim Rejections - 35 USC §112 



The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 
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7. Claims 1-20 rejected under 35 U.S.C. 112, second paragraph, as being indefinite 
for failing to particularly point out and distinctly claim the subject matter which applicant 
regards as the invention. 

8. Regarding claim 1 , "an information acquirer that acquires their authentication 
information from outside of the second device", lines 16-18, is unclear. 

9. Claims 1 , 7, 8, and 20 are rejected under 35 U.S.C. 1 12, second paragraph, as 
being incomplete for omitting essential elements, such omission amounting to a gap 
between the elements. See MPEP § 2172.01. The omitted elements is: how the 
authentication information generator generates the fourth authentication information 
from the second and third authentication information. 

1 0. Regarding clialm 5, "a device that performs mutual authentication with the first 
device acquires the fourth authentication information from the second device, and sets 
the first device for the first authentication infonnatlon as initial setting," is unclear. 

1 1 . Regarding claims 7-8 and 20, "third authentication information provided from 
outside of the second device," Is unclear. 

12. Claim 14 recites the limitation "the fourth authentication information" in line 7. 
There is insufficient antecedent basis for this limitation in the claim. 

Claim Rejections - 35 USC § 102 

1 3. The following Is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
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(b) the invention was patented or described in a printed publication in tliis or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

14. Claims 1-20 are rejected under 35 U.S.C. 102(b) as being anticipated by Raitli, 
USPN 5,241,598. 

Regarding claims 1-3 and 5, Raith discloses device authentication system in which a 
first device/radio network or base station (fig. 1, B1-B10 and col. 14, lines 46-50), 
authenticates a second device/mobile station (fig. 1 , M1-M10), 
wherein the first device/network, comprises: 

a transmission/reception section that transmits and receives information to/from the 
second device/mobile station, (col. 9, lines 48-50); 

a first information holding section that holds first authentication information/changeable 
key input/RAND (cdl. 15, lines 59-60), in a secure area (col. 8, lines 6-7); and 
a decider/controller, that makes a decision on authentication (col. 8, lines 62-66 and col. 
9, lines 48-50), 

the second device/mobile station comprises: 

a transmission/reception section that transmits and receives information to/from the first 
device/network; 

a second information holding section that holds second authentication 
information/mobile Identification number/MIN (col. 15, lines 64-65), (col. 7, line 64-col. 8, 
line 3); 

an information acquirer that acquires third authentication information/electronic serial 
number/ESN (col. 16, line 8), from outside of the second device/mobile station; and 
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an authentication information generator which generates fourth authentication 
information/temporary encryption key (col. 16, lines 11-12), from the second 
authentication information/MIN, and the third authentication infomnation/ESN, and 
outputs the fourth authentication information/l<ey, to the first device/network, through the 
transmission/reception section, (col. 17, lines 17-20) and 

the decider/controller, makes a decision on conformity between the first authentication 
information/RAND, and the fourth authentication information/key, to authenticate the 
second device/mobile station (col. 16, lines 13-20). 

Regarding claim 4, Raith discloses wherein the second authentication information is 
updated whenever the authentication processing is perfomied, and according to update 
of the second authentication information, the first authentication information held in the 
first information holding section in the first device is updated (col. 15, line 57-col. 16, line 
5). 

Regarding claim 6, Raith discloses wherein the third authentication/ESN information is 
held in a device/network, that performs mutual authentication with the first device, and is 
provided from the device to the second device in authentication processing (col. 18, 
lines 49-55). 

Regarding claim 7, -Raith discloses a mutual authentication device authentication 
method (col. 18, lines 49-55) in which a first device/network, authenticates a second 
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device/mobile station, wherein the first device/network, holds first authentication 
information in a secure area/RAND, the second device that holds second authentication 
information/RESP generates fourth authentication/B-Key, infomnation form the second 
authentication information/RESP, and third authentication information/RESPBIS, 
provided from outside of the second device, and the first device makes a decision on 
conformity between- the first authentication information and the fourth authentication 
information to authenticate the second device (fig. 4, and col. 18 line 55- col. 19, line 
20). 

Regarding claim 8, -Raith discloses a second device/mobile station, to be authenticated 
by a first device/network, comprising: a transmission/reception section that transmits 
and receives information to/from the first device; an information holding section that 
holds second authentication information/mobile identification number/MIN (col. 15, lines 
64-65), (col. 7, line 64-col. 8, line 3 an information acquirer that acquires third 
authentication information/electronic serial number/ESN (col. 16, line 8), from outside of 
the second device/mobile station; and an authentication information generator which 
generates fourth authentication information/temporary encryption key (col. 16, lines 11- 
12), from the second authentication information/Ml N, and the third authentication 
information/ESN, and outputs the fourth authentication information/key, to the first 
device/network, through the transmission/reception section, (col. 17, lines 17-20). 



Regarding claim 9. Raith discloses wherein the transmission/reception section receives 
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random information/RAND from the first device, and the authentication information 
generator encrypts the random information/RAND, using the fourth authentication 
information to transmit to the first device through the transmission/reception section (col. 
16, lines 2-5). 

Regarding claim 10, Raith discloses wherein the transmission/reception section 
receives the random information from the first device, and the authentication Information 
generator encrypts the fourth authentication information using the random information to 
transmit to the first device through the transmission/reception section (col. 16, lines 2-5). 

Regarding claims 1 1-13, Raith discloses further comprising: an update control section 
that controls update of information required for processing for authentication, wherein 
after authentication from the first device succeeds, substituting for the second 
authentication information, the update control section stores in the information holding 
section the random information as new second authentication information, generates 
key information that Is new authentication Information from the third authentication 
information and the random information, and has the first device hold the key 
infonnation through the transmission/reception section (col. 7, line 60 - col. 8, line 52). 

Regarding claim 14, Raith discloses a first device that authenticates a second device, 
comprising: a transmission/reception section that transmits and receives information 
to/from the second device/mobile station, (col. 9, lines 48-50); 
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a first information holding section that holds first authentication information/changeable 
key input/RAND (col. 15. lines 59-60), in a secure area (coL 8, lines 6-7); and 
the decider/controller, makes a decision on conformity between the first authentication 
information/RAND, and the fourth authentication information/key, to authenticate the 
second device/mobile station (col. 16, lines 13-20). 

Regarding claim 15, Raith discloses further comprising: a random information generator 
that generates random information to transmit to the second device through the 
transmission/reception section (col. 15, lines 57-62), wherein the decider decodes (fig. 
3, #129, 130, 136) information received in the transmission/reception section using the 
first authentication information, and makes a decision on conformity between the 
decoded information and the random information (col. 16, lines 13-20). 

Regarding claim 16, Raith discloses the first device according to claim 14, further 
comprising: a random information generator that generates random information to 
transmit to the second device through the transmission/reception section, (col. 15, lines 
57-62), wherein the decider decodes (fig. 3, #129, 130, 136) information received in the 
transmission/reception section using the random information, and makes a decision on 
conformity between the decoded information and the first authentication information 
(col. 16. lines 13-20). 

Regarding claims 17-19, Raith discloses wherein after authentication of the second 
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device succeeds, substituting for the first authentication information, the information 
holding section holds key information that is new authentication information received in 
the transmission/reception section, as new first authentication information (col. 7, line 60 
- col. 8, line 52). 

Regarding claim 20. A program for having a computer, which is integrated into a second 
device/mobile station, to be authenticated by a first device/network, execute the 
procedures of: generates fourth authentication information/temporary encryption key 
(col. 16, lines 11-12), from the second authentication information/MIN, that the second 
device holds, and the third authentication information/ESN, acquired from outside of the 
second device; requesting an issue of random information to the first device (col. 15, 
lines 57-65); and encrypting the random information received from the first device using 
the fourth authentication information to output to the first device (col. 16, lines 10-15). 

Conclusion 

1 5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Aubrey H. Berger whose telephone number is (571)272- 
8155. The examiner can normally be reached on Monday - Thursday, and alternate 
Friday's. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jacques Louis-Jacques can be reached on (571)272-6962. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 



AHB 




